This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wSWymzX5ndixaFSXk9INLCK00Og.roa File: wSWymzX5ndixaFSXk9INLCK00Og.roa (raw, json) Hash identifier: feHy2eZuFo1U3tk9laeV4kxC1zU/ICVpQcE4je+GcBM= Subject key identifier: C1:25:B2:9B:35:F9:9D:D8:B1:68:54:97:93:D2:0D:2C:22:B4:D0:E8 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C065DD4752777115D4DC40AB3A15A7D6D Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wSWymzX5ndixaFSXk9INLCK00Og.roa Signing time: Sat 25 Nov 2023 12:04:21 +0000 ROA not before: Sat 25 Nov 2023 12:04:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 2001:67c:64:ffff:0:18c:65d:8c22/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:06:5d:d4:75:27:77:11:5d:4d:c4:0a:b3:a1:5a:7d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 25 12:04:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=c125b29b35f99dd8b168549793d20d2c22b4d0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:58:2d:73:e4:82:de:43:48:60:7d:44:b0: c7:5f:1d:8f:79:1b:6e:21:75:34:97:c6:67:35:40: 07:b7:bd:90:89:64:f7:1c:92:a1:b0:50:99:71:72: c7:76:ec:e4:cb:4f:8c:f3:fb:51:22:49:14:7a:42: 6b:8e:3f:63:1c:8f:ef:0d:a9:17:24:9e:7f:75:bf: 11:60:18:f5:d5:bd:17:59:05:52:d0:44:1d:d0:6d: 05:08:24:51:83:2f:7a:2b:f9:e7:ea:5e:b9:86:7f: c3:8b:0d:01:82:d8:21:82:54:e9:1a:dd:02:59:54: 64:2a:e2:82:f9:f4:82:a6:fe:6e:2f:31:da:88:99: 46:3f:3a:70:35:c0:a5:a9:6a:b7:bf:22:6b:5b:0d: 53:28:da:bf:8d:59:9f:f8:d8:e4:eb:01:44:cf:bb: ff:fb:b7:3c:9b:3f:ed:5e:c6:86:32:d4:15:42:a3: 45:39:28:78:44:83:52:5a:fd:1c:ec:66:eb:d2:ba: 0d:32:6d:59:f4:9a:ee:76:e7:88:84:8f:15:e8:37: 6f:5c:55:bf:d3:ed:6c:3b:78:66:10:40:31:ac:62: 6d:54:26:4a:11:3b:69:a3:c5:06:16:2e:30:d4:27: 68:2a:6f:d3:33:40:bc:70:34:8b:7e:6c:d9:f9:a4: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:B2:9B:35:F9:9D:D8:B1:68:54:97:93:D2:0D:2C:22:B4:D0:E8 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wSWymzX5ndixaFSXk9INLCK00Og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption c7:83:e3:d1:e0:5e:f3:de:a5:7b:35:7f:d4:a7:f3:18:d1:2e: 5c:3d:cc:b2:68:d4:8e:1d:02:1f:d8:69:5d:7d:ae:c5:eb:d4: db:00:62:d4:28:d5:82:fb:0d:cc:e9:89:e5:fc:b6:1a:d1:b5: 5d:9c:1b:c1:a8:f0:6b:fa:09:89:a8:ab:20:7e:5c:e2:9f:8c: 7d:f5:81:f9:c0:14:bb:bb:86:d1:24:14:de:88:9f:de:66:bb: 56:e1:7f:88:7a:0f:8c:aa:3b:0d:f3:ae:df:1f:43:81:e7:93: 4b:67:12:50:5e:b5:30:ca:38:64:72:2e:e5:ad:d0:9b:96:02: f1:07:77:f4:83:03:46:83:2b:9b:6d:7e:e7:44:2b:79:20:74: d2:a9:f7:eb:e3:fd:df:2b:2d:bc:49:3d:ed:19:f6:a5:7e:29: d6:0a:5e:c6:34:62:f7:9a:41:cf:59:5f:4a:25:ed:05:a4:34: 60:a7:55:d7:63:b3:94:f3:36:65:b0:1a:c4:5a:ef:41:71:90: 0f:4d:89:a1:f1:12:5c:b0:5e:11:cd:79:1e:32:f9:9f:38:a9: 1f:53:bc:bb:52:c6:ec:22:dc:e1:6c:77:ac:c6:0e:4f:00:ab: 1e:3c:05:4b:fb:e1:4f:7d:ff:e1:bd:4d:f5:c4:ea:f0:32:e9: 2b:f1:d8:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwGXdR1J3cRXU3ECrOhWn1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTI1MTIwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTI1YjI5YjM1Zjk5ZGQ4YjE2ODU0OTc5M2QyMGQyYzIyYjRkMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm1YLXPkgt5DSGB9RLDHXx2PeRtu IXU0l8ZnNUAHt72QiWT3HJKhsFCZcXLHduzky0+M8/tRIkkUekJrjj9jHI/vDakX JJ5/db8RYBj11b0XWQVS0EQd0G0FCCRRgy96K/nn6l65hn/Diw0BgtghglTpGt0C WVRkKuKC+fSCpv5uLzHaiJlGPzpwNcClqWq3vyJrWw1TKNq/jVmf+Njk6wFEz7v/ +7c8mz/tXsaGMtQVQqNFOSh4RINSWv0c7Gbr0roNMm1Z9JrudueIhI8V6DdvXFW/ 0+1sO3hmEEAxrGJtVCZKETtpo8UGFi4w1CdoKm/TM0C8cDSLfmzZ+aRNdwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMElsps1+Z3YsWhUl5PSDSwitNDoMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvd1NXeW16WDVuZGl4YUZTWGs5SU5MQ0swME9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMeD49HgXvPepXs1f9Sn 8xjRLlw9zLJo1I4dAh/YaV19rsXr1NsAYtQo1YL7DczpieX8thrRtV2cG8Go8Gv6 CYmoqyB+XOKfjH31gfnAFLu7htEkFN6In95mu1bhf4h6D4yqOw3zrt8fQ4Hnk0tn ElBetTDKOGRyLuWt0JuWAvEHd/SDA0aDK5ttfudEK3kgdNKp9+vj/d8rLbxJPe0Z 9qV+KdYKXsY0YveaQc9ZX0ol7QWkNGCnVddjs5TzNmWwGsRa70FxkA9NiaHxElyw XhHNeR4y+Z84qR9TvLtSxuwi3OFsd6zGDk8Aqx48BUv74U99/+G9TfXE6vAy6Svx 2Ho= -----END CERTIFICATE-----Generated at Sat Dec 20 20:30:14 2025 by rpki-client